Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    869bc12bb663fff83c4b4bd5841f05cc95d01937d13aae995492470768f5f263

  • Size

    129KB

  • Sample

    221202-3lblpshg8z

  • MD5

    a895cec1fd2b7a3c3c046fb827745685

  • SHA1

    809a16461d2b8c028ab410ade5ca0928ad2ba2c3

  • SHA256

    869bc12bb663fff83c4b4bd5841f05cc95d01937d13aae995492470768f5f263

  • SHA512

    b712804e6ba45616697a77a3bac27dff467811d28067a706cdf48e1dfed0be85efff4b5cfb6651c62e3299192e0e16a40f224a97f0b47af9aa5427b621090b8c

  • SSDEEP

    3072:VSpwlIBX6/ko1ccfCTR9gjOIz4pWEQ8Kdk:VSpuOST1cACTfgjdkAb8F

Score
8/10
upx

Malware Config

Targets

    • Target

      869bc12bb663fff83c4b4bd5841f05cc95d01937d13aae995492470768f5f263

    • Size

      129KB

    • MD5

      a895cec1fd2b7a3c3c046fb827745685

    • SHA1

      809a16461d2b8c028ab410ade5ca0928ad2ba2c3

    • SHA256

      869bc12bb663fff83c4b4bd5841f05cc95d01937d13aae995492470768f5f263

    • SHA512

      b712804e6ba45616697a77a3bac27dff467811d28067a706cdf48e1dfed0be85efff4b5cfb6651c62e3299192e0e16a40f224a97f0b47af9aa5427b621090b8c

    • SSDEEP

      3072:VSpwlIBX6/ko1ccfCTR9gjOIz4pWEQ8Kdk:VSpuOST1cACTfgjdkAb8F

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks